DNS Tools
Public DNS Servers
A short list of reliable public resolvers, tested live. Pick one for speed, privacy, or built-in protection from malware and adult content.
Live test results appear here.
Global providers
| Provider | IPv4 | IPv6 | Encrypted DNS | Live status |
|---|---|---|---|---|
| Google Public DNS Standard · United States No filtering | 8.8.8.8 8.8.4.4 | 2001:4860:4860::8888 2001:4860:4860::8844 | DoH https://dns.google/dns-query DoT dns.google | Not tested |
| Cloudflare 1.1.1.1 · United States No filtering | 1.1.1.1 1.0.0.1 | 2606:4700:4700::1111 2606:4700:4700::1001 | DoH https://cloudflare-dns.com/dns-query DoT one.one.one.one | Not tested |
| Cloudflare 1.1.1.1 for Families (malware) · United States Malware and phishing blocking | 1.1.1.2 1.0.0.2 | 2606:4700:4700::1112 2606:4700:4700::1002 | DoH https://security.cloudflare-dns.com/dns-query DoT security.cloudflare-dns.com | Not tested |
| Cloudflare 1.1.1.1 for Families (malware and adult) · United States Family filter | 1.1.1.3 1.0.0.3 | 2606:4700:4700::1113 2606:4700:4700::1003 | DoH https://family.cloudflare-dns.com/dns-query DoT family.cloudflare-dns.com | Not tested |
| Quad9 Secure · Switzerland Malware and phishing blocking Nonprofit | 9.9.9.9 149.112.112.112 | 2620:fe::fe 2620:fe::9 | DoH https://dns.quad9.net/dns-query DoT dns.quad9.net | Not tested |
| Quad9 Unsecured · Switzerland No filtering Nonprofit | 9.9.9.10 149.112.112.10 | 2620:fe::10 2620:fe::fe:10 | DoH https://dns10.quad9.net/dns-query DoT dns10.quad9.net | Not tested |
| Cisco OpenDNS Home · United States Malware and phishing blocking Phishing protection | 208.67.222.222 208.67.220.220 | 2620:119:35::35 2620:119:53::53 | DoH https://doh.opendns.com/dns-query | Not tested |
| Cisco OpenDNS FamilyShield · United States Family filter | 208.67.222.123 208.67.220.123 | None | DoH https://doh.familyshield.opendns.com/dns-query | Not tested |
| AdGuard DNS Default · Cyprus Ad and tracker blocking | 94.140.14.14 94.140.15.15 | 2a10:50c0::ad1:ff 2a10:50c0::ad2:ff | DoH https://dns.adguard-dns.com/dns-query DoT dns.adguard-dns.com | Not tested |
| AdGuard DNS Family · Cyprus Family filter | 94.140.14.15 94.140.15.16 | 2a10:50c0::bad1:ff 2a10:50c0::bad2:ff | DoH https://family.adguard-dns.com/dns-query DoT family.adguard-dns.com | Not tested |
| AdGuard DNS Non-filtering · Cyprus No filtering | 94.140.14.140 94.140.14.141 | 2a10:50c0::1:ff 2a10:50c0::2:ff | DoH https://unfiltered.adguard-dns.com/dns-query DoT unfiltered.adguard-dns.com | Not tested |
| CleanBrowsing Security · United States Malware and phishing blocking | 185.228.168.9 185.228.169.9 | 2a0d:2a00:1::2 2a0d:2a00:2::2 | DoH https://doh.cleanbrowsing.org/doh/security-filter/ DoT security-filter-dns.cleanbrowsing.org | Not tested |
| CleanBrowsing Family · United States Family filter | 185.228.168.168 185.228.169.168 | 2a0d:2a00:1:: 2a0d:2a00:2:: | DoH https://doh.cleanbrowsing.org/doh/family-filter/ DoT family-filter-dns.cleanbrowsing.org | Not tested |
| Control D Free, unfiltered · Canada No filtering | 76.76.2.0 76.76.10.0 | 2606:1a40:: 2606:1a40:1:: | DoH https://freedns.controld.com/p0 DoT p0.freedns.controld.com | Not tested |
| UltraDNS Public (Vercara) Standard · United States No filtering | 64.6.64.6 64.6.65.6 | 2620:74:1b::1:1 2620:74:1c::2:2 | None | Not tested |
| Hurricane Electric Standard · United States No filtering | 74.82.42.42 | 2001:470:20::2 | DoH https://ordns.he.net/dns-query | Not tested |
| Gcore Standard · Luxembourg No filtering | 95.85.95.85 2.56.220.2 | None | None | Not tested |
| DNS.SB Standard · Germany No filtering | 185.222.222.222 45.11.45.11 | None | DoH https://doh.dns.sb/dns-query DoT dot.sb | Not tested |
| Comodo Secure DNS Standard · United States Malware and phishing blocking | 8.26.56.26 8.20.247.20 | None | None | Not tested |
North America
| Provider | IPv4 | IPv6 | Encrypted DNS | Live status |
|---|---|---|---|---|
| Lumen (Level 3) Legacy · United States No filtering Not officially supported for public use | 4.2.2.1 4.2.2.2 | None | None | Not tested |
| CIRA Canadian Shield Private · Canada No filtering | 149.112.121.10 149.112.122.10 | 2620:10a:80bb::10 2620:10a:80bc::10 | DoH https://private.canadianshield.cira.ca/dns-query DoT private.canadianshield.cira.ca | Not tested |
| CIRA Canadian Shield Protected · Canada Malware and phishing blocking | 149.112.121.20 149.112.122.20 | 2620:10a:80bb::20 2620:10a:80bc::20 | DoH https://protected.canadianshield.cira.ca/dns-query DoT protected.canadianshield.cira.ca | Not tested |
| CIRA Canadian Shield Family · Canada Family filter | 149.112.121.30 149.112.122.30 | 2620:10a:80bb::30 2620:10a:80bc::30 | DoH https://family.canadianshield.cira.ca/dns-query DoT family.canadianshield.cira.ca | Not tested |
Europe
| Provider | IPv4 | IPv6 | Encrypted DNS | Live status |
|---|---|---|---|---|
| DNS4EU Unfiltered · European Union No filtering | 86.54.11.100 86.54.11.200 | None | DoH https://unfiltered.joindns4.eu/dns-query | Not tested |
| DNS4EU Protective · European Union Malware and phishing blocking | 86.54.11.1 86.54.11.201 | None | DoH https://protective.joindns4.eu/dns-query | Not tested |
| Yandex DNS Basic · Russia No filtering | 77.88.8.8 77.88.8.1 | 2a02:6b8::feed:0ff 2a02:6b8:0:1::feed:0ff | None | Not tested |
Asia
| Provider | IPv4 | IPv6 | Encrypted DNS | Live status |
|---|---|---|---|---|
| AliDNS (Alibaba) Standard · China No filtering | 223.5.5.5 223.6.6.6 | 2400:3200::1 2400:3200:baba::1 | DoH https://dns.alidns.com/dns-query DoT dns.alidns.com | Not tested |
| DNSPod (Tencent) Standard · China No filtering | 119.29.29.29 | None | DoH https://doh.pub/dns-query DoT dot.pub | Not tested |
| 114DNS Standard · China No filtering | 114.114.114.114 114.114.115.115 | None | None | Not tested |
| KT Corporation Standard · South Korea No filtering | 168.126.63.1 168.126.63.2 | None | None | Not tested |
What the live test checks
- Online
- The server answered a standard query, with the response time shown.
- Answer
- The server returns the same answer as the authoritative nameservers for a known test record.
- DNSSEC
- The server rejects a deliberately broken DNSSEC domain, which protects you from forged answers.
- Rewrites
- Flags servers that return an address, often an ad page, for domains that do not exist.
How to change your DNS servers
Windows 11
Settings → Network & internet → your connection → Hardware properties → DNS server assignment → Edit → Manual. Enter the IPv4 addresses and set DNS over HTTPS to On if the provider supports it.
macOS
System Settings → Network → your connection → Details → DNS. Add the addresses with the plus button and remove the old ones.
Android
Settings → Network & internet → Private DNS → enter the provider's DoT hostname, for example dns.quad9.net. This encrypts DNS on every network.
Your router
Changing DNS on the router covers every device in the building. Look for DNS under WAN or Internet settings. If your office uses a firewall or domain controller, change it there instead.
Business networks with Active Directory must keep the domain controller as the primary DNS server on each computer. Change forwarders on the server instead, or you will break logons. Ask Connected Geek if you are not sure.